try to disassemble this ("http://nezumi-lab.org/ffh/anti-ida-idx.zip") example. IDA 5.3 fails to do it. there is a huge array of faked callbacks point to every odd byte of PE image. they are never executed, but IDA does not know this, so it creates functions in the middle of machine commands. IDA 4.7 works fine.



http://nezumi-lab.org/blog/?p=23